Vulnerability Details CVE-2020-25193
By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.3%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
Products affected by CVE-2020-25193
-
cpe:2.3:h:ge:rt430:-
-
cpe:2.3:h:ge:rt431:-
-
cpe:2.3:h:ge:rt434:-
-
cpe:2.3:o:ge:rt430_firmware:-
-
cpe:2.3:o:ge:rt430_firmware:08a05
-
cpe:2.3:o:ge:rt431_firmware:-
-
cpe:2.3:o:ge:rt431_firmware:08a05
-
cpe:2.3:o:ge:rt434_firmware:-
-
cpe:2.3:o:ge:rt434_firmware:08a05